Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File:                     8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier:          47PYsNQVunMHw8yBvrI/2gs6XkfPuXAx05Ko1YNZyP0=
Subject key identifier:   8B:B8:A5:D2:01:3D:69:00:47:79:D6:80:C4:24:CE:2D:BD:A0:0B:FB
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer:       /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial:       019510FE0AE4A767029FE1152F595FE0B916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number:          0160
Signing time:             Sun 16 Feb 2025 23:00:39 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:39 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:39 +0000
Files and hashes:         1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: TDdnUdO+XXuw8nUh3JqNx1p8UkEuT1WiwUSvIrftjmg=)
                          2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=)
                          3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=)
                          4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:0a:e4:a7:67:02:9f:e1:15:2f:59:5f:e0:b9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
        Validity
            Not Before: Feb 16 23:00:39 2025 GMT
            Not After : Feb 17 23:00:39 2025 GMT
        Subject: CN=8bb8a5d2013d69004779d680c424ce2dbda00bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:8e:b0:c6:83:4d:6f:17:eb:45:bf:6c:51:
                    68:23:dc:8e:28:f6:14:f3:4d:62:04:a9:32:17:42:
                    8a:f7:23:e8:82:3e:91:1b:af:58:d5:c7:17:68:8a:
                    67:f8:cd:e7:6b:ed:b7:08:be:88:ba:50:3d:56:5f:
                    41:24:f9:72:24:4f:87:e7:1b:19:74:f2:63:2d:fe:
                    00:1e:46:1c:d9:9a:db:57:6d:43:a1:25:80:d7:15:
                    33:16:c6:a8:8f:fc:42:b2:1b:d9:3e:c3:24:ce:3f:
                    6f:38:34:86:84:07:a6:e2:86:ad:f3:d0:7b:d4:94:
                    54:27:b1:3f:e4:5f:7d:d4:ad:87:33:54:3b:eb:2e:
                    ea:38:5f:7b:14:14:75:39:71:ea:c9:96:78:51:47:
                    50:fd:9f:6f:ce:e1:ff:67:a7:d4:a9:ff:40:5d:15:
                    66:e6:2f:84:9b:d0:1a:0f:9c:92:da:86:91:d4:e2:
                    9f:d9:0a:5b:3a:39:3a:c1:9e:6e:04:fa:5f:0b:05:
                    1b:7e:98:d5:24:90:54:ee:7f:5b:9f:d5:73:e8:5b:
                    d1:ce:ab:34:de:dd:d6:c2:22:56:2a:72:4a:66:61:
                    e5:5a:04:6d:73:a6:7b:27:eb:0f:28:e6:9f:dd:9d:
                    aa:cf:e7:4b:3a:0b:2c:5e:8b:6a:42:f1:c7:bc:2f:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B8:A5:D2:01:3D:69:00:47:79:D6:80:C4:24:CE:2D:BD:A0:0B:FB
            X509v3 Authority Key Identifier:
                keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d4:9e:ff:df:14:f7:bb:97:a5:15:06:21:95:e2:40:3e:24:
         be:e8:d7:50:21:31:e3:23:47:ff:0e:bb:0b:c1:7d:a4:c4:53:
         1f:26:91:0f:ec:4d:4a:49:d4:36:df:c6:e5:9e:ee:2f:c1:0d:
         5e:0b:1b:5a:93:76:8c:33:8a:f4:ba:65:76:cd:bc:e6:34:6d:
         cb:84:be:44:25:73:99:02:f6:0f:88:5f:b1:93:81:d7:fe:c8:
         00:7e:37:e8:d4:45:dc:cc:19:39:62:7d:42:6e:2f:5c:8e:49:
         7c:3b:ba:ac:58:e0:c2:cf:fe:84:d7:2d:fb:63:59:55:9c:75:
         ff:6f:85:8b:ce:e7:f4:a2:0b:9c:78:3e:94:9a:f6:94:58:b0:
         54:55:0f:be:00:8f:26:17:7c:3b:6b:f5:a0:0e:d1:29:0a:69:
         1a:64:ce:45:9b:51:47:6e:44:b9:f5:5b:5b:7d:4d:e6:8b:f1:
         19:3b:b9:27:42:23:1b:f2:da:bd:d0:08:ce:89:4e:94:4f:6e:
         88:1c:1e:d6:9e:f6:30:51:8f:fe:84:50:e3:f0:bf:ca:99:e8:
         9f:4a:4d:8e:37:f7:55:2d:d0:da:b7:f7:ae:b9:2d:d7:fe:17:
         40:82:09:16:40:ca:15:50:47:db:e4:29:1e:8b:a3:82:41:fb:
         42:07:8b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:24 2025 by rpki-client